- (Exam Topic 1)
Which Cisco product provides proactive endpoint protection and allows administrators to centrally manage the deployment?

1. A. NGFW
2. B. AMP
3. C. WSA
4. D. ESA

Correct Answer: B

- (Exam Topic 2)
What is managed by Cisco Security Manager?

1. A. access point
2. B. WSA
3. C. ASA
4. D. ESA

Correct Answer: C
Reference: https://www.cisco.com/c/en/us/products/security/security-manager/index.html

- (Exam Topic 1)
In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?

1. A. Smurf
2. B. distributed denial of service
3. C. cross-site scripting
4. D. rootkit exploit

Correct Answer: C
Cross site scripting (also known as XSS) occurs when a web application gathers malicious data from a user. The data is usually gathered in the form of a hyperlink which contains malicious content within it. The user will most likely click on this link from another website, instant message, or simply just reading a web board or email message.Usually the attacker will encode the malicious portion of the link to the site in HEX (or other encoding methods) so the request is less suspicious looking to the user when clicked on.For example the code below is written in hex: <ahref=javascript:alert&#x28'XSS')>Click Here</a>is equivalent to:<a href=javascript:alert('XSS')>Click Here</a>Note: In the format “&#xhhhh“, hhhh is the code point in hexadecimal form.

- (Exam Topic 3)
An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into network devices. Which action accomplishes this task?

1. A. Configure Cisco DUO with the external Active Directory connector and tie it to the policy set within Cisco ISE.
2. B. Install and configure the Cisco DUO Authentication Proxy and configure the identity source sequence within Cisco ISE
3. C. Create an identity policy within Cisco ISE to send all authentication requests to Cisco DUO.
4. D. Modify the current policy with the condition MFASourceSequence DUO=true in the authorization conditions within Cisco ISE

Correct Answer: B

- (Exam Topic 3)
A company identified a phishing vulnerability during a pentest What are two ways the company can protect employees from the attack? (Choose two.)

1. A. using Cisco Umbrella
2. B. using Cisco ESA
3. C. using Cisco FTD
4. D. using an inline IPS/IDS in the network
5. E. using Cisco ISE

Correct Answer: AB